Test Kennung:	1.3.6.1.4.1.25623.1.0.810965
Kategorie:	Web Servers
Titel:	Apache TomEE RCE Vulnerability
Zusammenfassung:	Apache TomEE is prone to a remote code execution (RCE); vulnerability.
Beschreibung:	Summary: Apache TomEE is prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: The flaw is due to an unspecified error in EjbObjectInputStream class related to EJBd protocol. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary code via a crafted serialized object. Affected Software/OS: Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3. Note: This issue only affects you if you rely on EJBd protocol (proprietary remote EJB protocol). This one is not activated by default on the 7.x series but it was on the 1.x ones. Solution: Upgrade to version 1.7.4 or 7.0.0-M3 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0779 BugTraq ID: 79204 http://www.securityfocus.com/bid/79204 Bugtraq: 20160315 [ANNOUNCE][CVE-2016-0779] Apache TomEE 1.7.4 and 7.0.0-M3 releases (Google Search) http://www.securityfocus.com/archive/1/537806/100/0/threaded http://packetstormsecurity.com/files/136256/Apache-TomEE-Patched.html http://www.zerodayinitiative.com/advisories/ZDI-15-638 http://tomee-openejb.979440.n4.nabble.com/Document-resolved-vulnerability-CVE-2015-8581-td4678073.html
Copyright	Copyright (C) 2017 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.